Certificate permissions too wide

I used "Manage SSL certificate" functionaliy to add certificate and key files. Before that I had enabled SSL for that domain.

Why the cert and key files have read permissions for everyone? I all permissions from other and restarted Apache. Everything still worked. The home directories have x permission for everyone so this mean everyone could read the PRIVATE key file. Is this ok for everyone or am I missing something?

I use Virtualmin version 3.56 (Pro).

Status: 
Closed (fixed)